Starscream Project Starscream
2 CVEs affecting Starscream Project Starscream. Latest disclosed: 2017-04-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7192 | High | 7.5 | 2017-04-06 | WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true bu… |
CVE-2017-5887 | High | 7.5 | 2017-04-06 | WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (this is too late; pinning should occur i… |